Manifest

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
File:                     9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft (raw, json)
Hash identifier:          mg38PcJXHUv7i1Vg77N5AXZc1dodQXDrLkHZuxsAj5M=
Subject key identifier:   AF:2A:E7:AE:7E:42:52:28:63:B4:AA:EE:26:2D:93:AD:9E:98:CB:2A
Authority key identifier: 9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44
Certificate issuer:       /CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344
Certificate serial:       3714B514473374B0806EE54320F5CAB36CEC0DEE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
Manifest number:          2A
Signing time:             Tue 02 Jun 2026 15:44:05 +0000
Manifest this update:     Tue 02 Jun 2026 15:39:05 +0000
Manifest next update:     Wed 03 Jun 2026 18:46:05 +0000
Files and hashes:         1: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: zW2qkXEpoz4y3CxwswSc/8npi9VR1vmLGxgHBmxtWZc=)
                          2: 9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl (hash: wkeU0x4imTdliyuEFZcKwIc53Kot/O4oCOidfsF2mP4=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl
                          rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jun 2026 10:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:14:b5:14:47:33:74:b0:80:6e:e5:43:20:f5:ca:b3:6c:ec:0d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0AD7062A3E060D75A55B4E5047F6AFD88C1344
        Validity
            Not Before: Jun  2 15:39:05 2026 GMT
            Not After : Jun  3 18:46:05 2026 GMT
        Subject: CN=AF2AE7AE7E42522863B4AAEE262D93AD9E98CB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:7f:f3:71:9a:0a:7f:3c:1a:84:4d:45:87:
                    41:5f:2a:b9:46:2d:b9:fb:ca:7d:18:10:f6:67:96:
                    bc:26:49:23:ac:36:e6:88:43:03:49:a8:ee:96:e6:
                    0b:0f:bb:46:0f:69:25:56:b4:a8:f7:c1:11:2e:f6:
                    b6:88:cf:e7:c5:63:bb:22:5f:9a:8a:77:22:aa:7f:
                    fd:c0:94:e5:99:1f:e6:1b:89:d8:43:15:90:d0:d8:
                    32:0c:a2:8f:e8:ca:ab:5a:1e:af:32:5f:67:c7:9b:
                    5b:b1:e3:27:b6:8c:5d:4c:9f:f6:87:f9:30:a7:70:
                    2f:8e:45:c1:6f:a4:38:e2:1b:df:56:43:f7:d4:ba:
                    34:f4:07:c5:c1:94:85:79:9d:1e:b5:ba:24:e9:b3:
                    3f:34:5e:56:02:9a:91:6c:66:dc:23:21:de:75:10:
                    5f:45:ca:4c:be:e6:62:08:a6:1a:c5:e4:ed:5b:d4:
                    11:e0:8e:a0:a4:51:d5:4d:39:26:c7:79:b6:bb:9b:
                    c5:a1:d2:80:81:d6:8d:3f:c3:7e:0b:47:35:99:b3:
                    9c:da:b6:b4:1c:81:75:3f:e7:be:96:85:08:70:6c:
                    6d:e9:9c:71:73:ee:9a:d1:f0:30:1b:af:6a:be:92:
                    ef:65:a1:c0:1a:1b:f7:cc:9c:c1:3e:a5:a9:c6:64:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2A:E7:AE:7E:42:52:28:63:B4:AA:EE:26:2D:93:AD:9E:98:CB:2A
            X509v3 Authority Key Identifier:
                keyid:9C:0A:D7:06:2A:3E:06:0D:75:A5:5B:4E:50:47:F6:AF:D8:8C:13:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/9C0AD7062A3E060D75A55B4E5047F6AFD88C1344.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:08:31:7f:2f:c8:50:ba:ee:3b:36:d2:7c:27:18:0b:4d:
         08:2d:0d:a1:b9:ee:19:42:09:66:90:bb:93:a7:26:ce:14:24:
         9a:cd:80:01:b8:1c:3d:f5:3f:1f:2f:ea:6a:ae:fa:2a:54:90:
         a5:e0:cf:f0:18:76:0c:19:09:08:47:38:e2:a1:59:34:a0:9f:
         38:4e:c3:33:84:97:03:ff:47:e3:d1:07:83:f2:2d:f1:31:e9:
         83:b7:01:f4:5f:5e:b7:fd:28:7b:81:62:52:c8:95:9f:f4:2c:
         09:f6:df:a6:8f:66:5b:53:af:e5:fe:95:12:9d:ad:09:91:4e:
         33:76:ca:95:cd:a4:3e:dc:06:0f:1d:6c:20:6d:20:d1:55:a3:
         15:bf:40:40:63:3d:29:1b:90:5c:91:87:e1:3c:4f:3f:b9:3e:
         3b:84:36:60:b9:d7:cc:a3:63:2e:b9:f1:21:c2:78:cf:c7:de:
         39:42:dc:54:a1:44:b5:26:3d:c9:e6:90:cf:44:e8:09:58:dd:
         c1:49:3a:3b:cc:bc:3d:c7:57:91:5f:fd:84:7c:08:39:43:0e:
         54:26:46:fe:4c:a0:45:37:ce:e8:3f:96:ff:58:4f:90:e9:ae:
         66:f9:b6:d3:05:46:0e:fc:94:76:b8:4f:af:6d:42:29:4a:ac:
         f2:34:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:46:29 2026 by rpki-client